Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7E55EF13F77A3906E8A88DF41C70EB08719397A2.cer
File:                     7E55EF13F77A3906E8A88DF41C70EB08719397A2.cer (raw, json)
Hash identifier:          MleD1LQdsbmbFPVgjLOtb6Le1ViKjbZ3eJe4G1+bIgA=
Subject key identifier:   7E:55:EF:13:F7:7A:39:06:E8:A8:8D:F4:1C:70:EB:08:71:93:97:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C594A663B86A3DE925CF881CFA560CC4532343E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/0/7E55EF13F77A3906E8A88DF41C70EB08719397A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 17:58:35 +0000
Certificate not after:    Thu 07 Nov 2024 18:03:35 +0000
Subordinate resources:    AS: 270277
                          IP: 200.124.164.0/22
                          IP: 2804:698c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:59:4a:66:3b:86:a3:de:92:5c:f8:81:cf:a5:60:cc:45:32:34:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 17:58:35 2023 GMT
            Not After : Nov  7 18:03:35 2024 GMT
        Subject: CN=7E55EF13F77A3906E8A88DF41C70EB08719397A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:19:fc:7d:30:47:fd:69:a4:c8:bb:f2:3a:
                    59:87:6c:47:31:05:25:cc:be:82:47:e7:de:a0:a9:
                    b5:5f:9a:65:bc:56:c4:1a:42:ab:f1:23:a6:93:b3:
                    3a:6e:5a:65:35:6d:9a:c1:72:1f:44:06:5b:15:27:
                    8b:c8:7f:00:68:28:53:25:11:f1:82:0d:a4:57:72:
                    a7:6a:78:6f:aa:8e:43:85:4a:04:41:28:c1:3a:ce:
                    a1:61:d5:04:1b:e6:b3:6c:c7:1c:40:aa:4d:5a:9f:
                    02:ab:ea:f4:1c:bc:26:73:af:17:11:92:dd:0a:c4:
                    37:a2:77:61:df:27:39:8c:13:9a:0e:77:1d:b8:b0:
                    34:95:c0:57:95:10:f5:03:83:e5:99:6c:83:ff:11:
                    02:e0:0e:22:06:cc:3b:d3:2f:76:06:11:e7:9e:13:
                    72:5c:25:d2:d9:26:3d:34:06:79:69:ac:a5:dd:4a:
                    7f:ae:75:e1:6f:36:76:67:7a:74:49:3d:5e:d3:dc:
                    d5:51:70:0d:ec:4b:9c:f4:f6:68:08:42:12:9b:82:
                    5e:ed:27:57:79:2a:45:df:34:55:47:46:25:11:25:
                    43:b5:23:1c:5e:49:2f:35:01:45:a0:2b:29:18:f5:
                    df:7c:8a:b8:69:bd:bb:ba:02:52:8f:aa:5c:d0:c9:
                    92:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:55:EF:13:F7:7A:39:06:E8:A8:8D:F4:1C:70:EB:08:71:93:97:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/0/7E55EF13F77A3906E8A88DF41C70EB08719397A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.164.0/22
                IPv6:
                  2804:698c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270277

    Signature Algorithm: sha256WithRSAEncryption
         ad:cf:ad:29:b3:64:87:37:ca:60:10:a1:00:d9:6d:46:f4:df:
         dd:09:14:a5:5e:74:1a:de:59:3a:e1:e3:0a:9c:95:a4:55:f3:
         53:bf:73:bd:e8:40:fe:c9:f8:1f:b5:83:49:2f:1d:6d:e7:61:
         74:9b:05:ce:40:a9:60:23:52:01:b0:f7:e1:24:28:cc:a3:99:
         42:87:84:a1:48:81:96:83:a6:50:38:68:a7:fb:16:63:47:85:
         a8:2f:fe:4a:02:1e:5a:53:20:72:cc:e6:05:cb:5c:8f:cd:00:
         88:ca:f8:15:78:ec:4f:4c:ec:78:35:a2:96:85:34:3c:dd:f6:
         59:91:6e:64:56:38:05:7d:79:b2:14:82:35:a3:f5:0a:15:3e:
         a1:65:39:88:74:32:98:63:b6:84:c1:ce:dc:b6:3a:96:e8:a6:
         d5:48:c3:0c:85:34:ee:28:83:07:74:f8:36:02:f4:46:64:6c:
         a5:c2:f8:59:44:75:14:5f:a0:dd:2f:b5:56:9b:d7:33:a9:25:
         1c:e4:a4:46:bd:88:6b:18:02:11:99:31:3c:9c:19:fe:ed:be:
         46:bd:0b:51:d2:4c:41:44:93:0f:ba:a0:67:0f:e9:69:0d:fd:
         13:bc:52:d3:55:7a:4c:23:ce:f4:db:b9:e8:ed:8a:20:14:dc:
         91:9d:f8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----